Post hoc image and volume review of short-lived Linux containers

1. A post-hoc image review method for short-lived Linux containers, the method comprising:

directing a creation of a short-lived Linux container in a container management system;

applying an initial configuration to the short-lived Linux container;

detecting a termination of the short-lived Linux container; and,

responsive to the termination, snapshotting a configuration of the short-lived Linux container, comparing the initial configuration to the snapshotted configuration and displaying a list of differences in a container management display.

2. The method of claim 1 , wherein the snapshotted configuration is a list of files present in the short-lived Linux container contemporaneous with the termination, and the initial configuration is a list of files to be present in the short-lived Linux container contemporaneous with a creation of the short-lived Linux container.

3. The method of claim 1 , wherein the short-lived Linux container is created in reference to an image of a different short-lived Linux container.

4. The method of claim 2 , wherein the comparison is a comparison of data corresponding to the list of files present in the short-lived Linux container contemporaneous with the termination, and comparable data corresponding to the list of files present in the short-lived Linux container contemporaneous with the creation of the short-lived Linux container.

5. The method of claim 1 , further comprising:

associating each of the differences in the list with a corresponding configuration change from the initial configuration;

prompting in the display to whitelist each configuration change for each of the differences; and,

adding to a white list, each selected one of the differences as a permissible configuration change.

6. The method of claim 1 , further comprising:

associating each of the differences in the list with a corresponding configuration change from the initial configuration;

prompting in the display to blacklist each configuration change for each of the differences; and,

adding to a black list, each selected one of the differences as an impermissible configuration change.

7. A short-lived Linux container management data processing system configured for post-hoc image review method for short-lived Linux containers, the system comprising:

a host computing platform comprising one or more computers, each with memory and at least one processor;

a post-hoc image review module executing in the memory of the host computing platform and communicatively coupled to a short-lived Linux container manager managing creation, execution and termination of different short-lived Linux containers, the module comprising computer program instructions enabled to perform:

directing the short-lived Linux container manager to create a short-lived Linux container in a container management system and to apply an initial configuration to the short-lived Linux container;

detecting a termination of the short-lived Linux container by the short-lived Linux container manager; and,

to respond to the termination by directing the short-lived Linux container manager to snapshot a configuration of the short-lived Linux container, comparing the initial configuration to the snapshotted configuration and displaying a list of differences in a container management display of the module.

8. The system of claim 7 , wherein the snapshotted configuration is a list of files present in the short-lived Linux container contemporaneous with the termination, and the initial configuration is a list of files to be present in the short-lived Linux container contemporaneous with a creation of the short-lived Linux container.

9. The system of claim 7 , wherein the short-lived Linux container is created in reference to an image of a different short-lived Linux container.

10. The system of claim 8 , wherein the comparison is a comparison of data corresponding to the list of files present in the short-lived Linux container contemporaneous with the termination, and comparable data corresponding to the list of files present in the short-lived Linux container contemporaneous with the creation of the short-lived Linux container.

11. The system of claim 7 , wherein the program instructions are further enabled to perform:

associating each of the differences in the list with a corresponding configuration change from the initial configuration;

prompting in the display to whitelist each configuration change for each of the differences; and,

adding to a white list, each selected one of the differences as a permissible configuration change.

12. The system of claim 7 , wherein the program instructions are further enabled to perform:

associating each of the differences in the list with a corresponding configuration change from the initial configuration;

prompting in the display to blacklist each configuration change for each of the differences; and,

adding to a black list, each selected one of the differences as an impermissible configuration change.

13. A computer program product for post-hoc image review method for short-lived Linux containers, the computer program product including a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a device to cause the device to perform a method including:

directing a creation of a short-lived Linux container in a container management system;

applying an initial configuration to the short-lived Linux container;

detecting a termination of the short-lived Linux container; and,

responsive to the termination, snapshotting a configuration of the short-lived Linux container, comparing the initial configuration to the snapshotted configuration and displaying a list of differences in a container management display.

14. The computer program product of claim 13 , wherein the snapshotted configuration is a list of files present in the short-lived Linux container contemporaneous with the termination, and the initial configuration is a list of files to be present in the short-lived Linux container contemporaneous with a creation of the short-lived Linux container.

15. The computer program product of claim 13 , wherein the short-lived Linux container is created in reference to an image of a different short-lived Linux container.

16. The computer program product of claim 14 , wherein the comparison is a comparison of data corresponding to the list of files present in the short-lived Linux container contemporaneous with the termination, and comparable data corresponding to the list of files present in the short-lived Linux container contemporaneous with the creation of the short-lived Linux container.

17. The computer program product of claim 13 , wherein the method further comprises:

associating each of the differences in the list with a corresponding configuration change from the initial configuration;

prompting in the display to whitelist each configuration change for each of the differences; and,

adding to a white list, each selected one of the differences as a permissible configuration change.

18. The computer program product of claim 13 , wherein the method further comprises:

associating each of the differences in the list with a corresponding configuration change from the initial configuration;

prompting in the display to blacklist each configuration change for each of the differences; and,

adding to a black list, each selected one of the differences as an impermissible configuration change.